Analysis

  • max time kernel
    110s
  • max time network
    112s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/12/2023, 01:51

General

  • Target

    236c55e9ede7a4b71b93e2902f968aeb.exe

  • Size

    582KB

  • MD5

    236c55e9ede7a4b71b93e2902f968aeb

  • SHA1

    3736ab240669587733d429e4a00399236bfe946b

  • SHA256

    a730e235108a44192401119d9eec5f4f38cc6a614c8ee9d7f0ec995a65924734

  • SHA512

    6357195f2670346fb00b12919c7259c0893111516bee0155442ca1306753127171b6b16f18389e1b596192fc04e5aa0675d3ec13a77143e2dfff017eeb8c85df

  • SSDEEP

    12288:82Xqzh36xV2Gg0+K9KoP0G2FIz7O7L6ju70c:82Xqzh36f40+K9uUz7O7nn

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 6 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\236c55e9ede7a4b71b93e2902f968aeb.exe
    "C:\Users\Admin\AppData\Local\Temp\236c55e9ede7a4b71b93e2902f968aeb.exe"
    1⤵
    • Loads dropped DLL
    PID:4420

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nsi4E21.tmp\LangDLL.dll

    Filesize

    5KB

    MD5

    9384f4007c492d4fa040924f31c00166

    SHA1

    aba37faef30d7c445584c688a0b5638f5db31c7b

    SHA256

    60a964095af1be79f6a99b22212fefe2d16f5a0afd7e707d14394e4143e3f4f5

    SHA512

    68f158887e24302673227adffc688fd3edabf097d7f5410f983e06c6b9c7344ca1d8a45c7fa05553adcc5987993df3a298763477168d4842e554c4eb93b9aaaf